On Fri, 12 Jan 1996 10:38:14 -0500 
 der Mouse <mouse@Collatz.McRCIM.McGill.EDU> wrote:

 > But the main question I have about this is: how does fsck get exempted
 > from this?  It opens the device for writing, after all.

securelevel < 0 when fsck runs in /etc/rc.

--------------------------------------------------------------------------
Jason R. Thorpe                                       thorpej@nas.nasa.gov
NASA Ames Research Center                               Home: 408.866.1912
NAS: M/S 258-6                                          Work: 415.604.0935
Moffett Field, CA 94035                                Pager: 415.428.6939